LogoLogo
LogoLogo
  • Welcome
    • Navigation
  • RealmJoin Deployment
    • Onboarding
    • Required Permissions
    • Infrastructure Considerations
      • Multi User Devices
    • Migration to RealmJoin vNext
  • User, Group and Device Management
    • Overview
    • User Profile
    • Organization Details
    • User, Group and Device Lists
      • Advanced Search
      • User Details
      • Group Details
      • Device Details
    • User and Group Settings
      • Available RealmJoin Policies
  • App Management
    • Packages
      • Package Store
        • Application Store Details
      • Package Management
      • Package Details
      • Package Assignments
        • Package Migration
      • Package Settings
      • Packaging Requests
        • Organic Packages
    • AVD Templates
  • Automation
    • Connecting Azure Automation
      • Required Permissions
      • Runbook Parameters
    • Runbooks
      • Runbook Customization
      • Runbook Permissions
      • Naming Conventions
      • Runbook Scheduling
      • Runbook Logs
        • Runbook Job Details
      • Runbooks Changelog
    • Requirements
    • Remediation Scripts
  • RealmJoin Agent
    • Features
      • Local Admin Password Solution (LAPS)
        • KeyVault
        • Application Insights
      • Notifications
      • AnyDesk Integration
        • AnyDesk configuration
      • App Deployment using the Agent
        • RealmJoin ESP
    • Deploying the Agent
    • User Interface
  • Logs
    • Connecting Azure Log Analytics Workspace
    • Audit Log
  • RealmJoin Settings
    • Overview
    • General
    • Roles and Permissions
      • Pre-defined Roles
      • Custom Roles
        • Available Permissions
    • Group Namespaces
    • Workplace Cloud Storage
    • Self Service Forms
  • Developer Reference
    • RealmJoin API
      • Authentication
    • Interacting with Runbooks
    • Simulating a Runbook Environment
    • Local Admin Password Management
  • Other
    • FAQ
      • Security
    • Troubleshooting
      • Package Installation Issues
        • Collecting Logfiles
        • Logfiles Structure
        • Analysing chocolatey.log
        • Troubleshooting failed chocolatey packages
        • Troubleshooting failed craft packages
        • Fixes for common issues
        • Intunewin Debugging
      • LAPS Issues
        • LAPS account passwords cannot be retrieved
        • Requested LAPS Accounts are not being created
    • Changelog
  • Legal
    • Licensing
    • Support
  • RealmJoin Website
Powered by GitBook
On this page
  • Overview
  • Remediation Script List
  • Search and Sort
  • Filters
  • Remediation Script Details
  • Custom scripts
  • Managed Scripts

Was this helpful?

Edit on GitHub
  1. Automation

Remediation Scripts

Last updated 7 months ago

Was this helpful?

Overview

allow you to report and react to problems on your managed Windows clients using scripts.

RealmJoin Portal allows you to review Intune remediation scripts in your environment. Additionally, RealmJoin hosts a for you to use in GitHub.

Remediation Script List

The Remediation Script List shows you all existing and available remediation scripts for your environment.

Search and Sort

You can search for scripts by Author, Status or Name. The search will update as you type.

You can sort by most fields by clicking on the fields' header (name).

Filters

Use filters to limit the items displayed by state

  • Any (default) - Show all existing and available remediation scripts

  • Managed - Show all remediation scripts managed by RealmJoin. Available (a.k.a. "not staged"), staged and deployed.

  • Staged - Show only managed remediation scripts that have been imported into your Intune instance but not assigned to users/devices.

  • Deployed - Show only managed remediation scripts that are assigned to users/devices.

Remediation Script Details

When you click on a script's name, you can review a script's details, statistics and its stage, as well as deploy or remove managed scripts in your environment.

On the left side of the page, you will see metadata about the script, incl. flags such as if the scripts need to be executed on 32bit on a 64bit host.

Be aware, details can vary. For example, only scripts already staged/existing in your tenant can have a "last modified" date.

The right half of the page is split up into multiple tabs.

  • Overview - Basic information about the script

  • Detection Script Source - See the PowerShell Source of the detection script.

  • Remediation Script Source - See the PowerShell Source of the remediation script (which is optional).

Other tabs and UI elements depend on the state of the script package.

Custom scripts

  • Assignments - For scripts that you created outside of RealmJoin, you can review (but not change) the scripts' assignments to users and groups. This will also show the schedule for the detection script execution.

  • Statistics - Show execution and device statistics for the script

Managed Scripts

Not staged

If a managed script is not staged yet (i.e. does not exist in your Intune instance yet), RealmJoin Portal will offer a button to Stage the script in your environment.

This will make the script available for assignment, but not have any effect on your devices yet.

Staged and Deployed

Removal

Staged and deployed managed scripts can be removed from Intune using the More -> Delete button.

Assignment

You can assign managed scripts to users and devices in the Assignments tab.

When assigning a staged script, its status will change to deployed. At this point it can affect clients and users.

You can use Assign to All Users and Assign to All Devices to you Intune's default assignment targets for this script. This will show a dialogue to define the desired schedule for evaluation (detection):

Managed Groups

Alternatively, you can Create Managed Groups to create Entra Groups that will be assigned instead of "All Devices" or "All Users".

When updates for the managed remediation script become available, RealmJoin will make sure that these groups will be assigned to the update remediation script.

You can use change schedule to open the Script Schedule Editor for this assignment.

Using Unassign will remove individual group assignments.

Managed Scripts that exist in your environment show the same information as other (custom) scripts in your environment like existing assignments and statistics, see .

Deleting a managed script will also remove its (if such exist).

The naming scheme for Managed Groups can be defined in .

Settings -> General
Custom Scripts
Managed Groups
Intune remediation scripts
set of managed and constantly updated scripts
Remediation Script List
Remediation Script Details
Custom Script Assignments
Script Statistics
Stage a Managed Script
Delete a Managed Script
Assign Managed Scrips
Script Schedule Editor
Managed Groups